🇩🇪
4server
2026-04-21 06:38:07
(2 months ago)
[TueApr2108:38:02.8021172026][security2:error][pid3025243:tid3025322][client216.26.224.14:0]ModSecur ...
show more
[TueApr2108:38:02.8021172026][security2:error][pid3025243:tid3025322][client216.26.224.14:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"essesolution.ch\"][uri\"/database.sql\"][unique_id\"aecbSmR1Z2zCLsvvYp9XxgAAAEk\"]
show less
Port Scan
Brute-Force
Web App Attack
🇱🇻
garmtech.com
2025-12-31 12:59:05
(5 months ago)
IM360 WAF: Old style account creation and modification in Joomla! MV:registration
Web App Attack
2025-12-03 11:49:43
(6 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-11-26 09:02:26
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.224.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.224.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:02:20.676955 2025] [security2:error] [pid 13947:tid 13947] [client 216.26.224.14:24837] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.danasedge.net"] [uri "/.env"] [unique_id "aSbCHA4Mo9Y68fmr0x6XJwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 07:13:27
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.224.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.224.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:13:20.531692 2025] [security2:error] [pid 12706:tid 12706] [client 216.26.224.14:36383] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.linearconceptsllc.com"] [uri "/.env"] [unique_id "aSaokKNiVx6sjPmsXSkRyQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 03:08:52
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.224.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.224.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:08:44.558655 2025] [security2:error] [pid 5060:tid 5060] [client 216.26.224.14:10483] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.petesplaza.com"] [uri "/.env"] [unique_id "aSZvPFsW9X3XzeJSNYx2oAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 01:32:26
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.224.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.224.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:32:20.714527 2025] [security2:error] [pid 13345:tid 13345] [client 216.26.224.14:30503] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.jspd.com"] [uri "/.svn/wc.db"] [unique_id "aSZYpKzTj07KQT8CUTf4zgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 09:50:52
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.224.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.224.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:50:45.998902 2025] [security2:error] [pid 13520:tid 13520] [client 216.26.224.14:45669] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.mrpinman.org"] [uri "/.svn/wc.db"] [unique_id "aSQqddYqb6Z9dUMIPCTvAQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-23 18:44:10
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.224.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.224.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 13:44:04.721999 2025] [security2:error] [pid 6759:tid 6759] [client 216.26.224.14:34805] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jiggaboojones.com"] [uri "/.svn/wc.db"] [unique_id "aSNV9FluRHJrXID63X2aWgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-13 21:50:50
(7 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
2025-10-30 14:01:02
(7 months ago)
WordPress Brute Force
Brute-Force
🇩🇪
Marc
2025-10-29 19:09:44
(7 months ago)
Brute-Force
Web App Attack
🇦🇺
AWW-Admin
2025-10-29 12:46:42
(7 months ago)
(wordpress) Failed wordpress login from 216.26.224.14 (US/United States/-)
Brute-Force
2025-10-18 02:48:54
(8 months ago)
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.18 is noted in report tim ...
show more
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.18 is noted in report timestamp
show less
Hacking
Brute-Force
2025-10-15 16:23:12
(8 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.15 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.15 is noted in report timestamp
show less
Hacking
Brute-Force